CertH certH

SSL Grade Leaderboard: Top 100 Websites

Scanned from 20,000 top global websites · Updated 2026-11-08

12,269Domains
32%A+ share (3944)
94.8Avg score
↑ 111Improved this month
#DomainGradeScore30d trendΔTLSIssuerHSTSExpires
8801battle.netA95—–TLS1.2Amazon RSA 2048 M01—119 d
8802baynews9.comA95—–TLS1.2Amazon RSA 2048 M0497 d
8803bbk.ac.ukA95—–TLS1.2Amazon RSA 2048 M01—193 d
8804bcg.comA95—–TLS1.2Thawte TLS RSA CA G1—96 d
8805bcm.eduA95—–TLS1.2InCommon Intermediate CA - OVG2C—195 d
8806bcn.catA95—–TLS1.2DigiCert G2 TLS EU RSA4096 SHA384 2022 CA1—160 d
8807bdysq.comA95—–TLS1.2Xcc Trust DV SSL CA—76 d
8808beatstars.comA95—–TLS1.2Amazon RSA 2048 M01—98 d
8809beget.techA95——TLS1.2Let's Encrypt—17 d
8810behance.comA95—–TLS1.2Amazon RSA 2048 M04—136 d
8811beianjiaji.comA95—–TLS1.2TuringSign RSA Secure CA 2—75 d
8812belgiantrain.beA95—–TLS1.2DigiCert Global G2 TLS RSA SHA256 2020 CA1—146 d
8813bellard.orgA95—–TLS1.2Let's Encrypt—71 d
8814benjaminmoore.comA95—–TLS1.2DigiCert Global G2 TLS RSA SHA256 2020 CA1—76 d
8815bernama.comA95——TLS1.2Sectigo Public Server Authentication CA DV R3628 d
8816bestlawyers.comA95—–TLS1.2DigiCert Global G2 TLS RSA SHA256 2020 CA1120 d
8817bfmtv.comA95—–TLS1.2Amazon RSA 2048 M0474 d
8818bfs.deA95——TLS1.2D-TRUST BR CA 2-23-1 2023—119 d
8819bget.ruA95——TLS1.2Let's Encrypt—16 d
8820biglobe.ne.jpA95—–TLS1.2Amazon RSA 2048 M01103 d
8821bignox.comA95—–TLS1.2RapidSSL TLS RSA CA G1—74 d
8822bigpicture.ruA95—–TLS1.2Let's Encrypt48 d
8823bigsight.jpA95—–TLS1.2SECOM Passport for Web OV RSA CA 2024160 d
8824bikemap.netA95—–TLS1.2RapidSSL TLS RSA CA G1174 d
8825biobiochile.clA95—–TLS1.2RapidSSL TLS RSA CA G1148 d
8826biolinky.coA95—–TLS1.2Let's Encrypt78 d
8827birminghammail.co.ukA95—–TLS1.2Amazon RSA 2048 M01—57 d
8828bizjournals.comA95—–TLS1.2Amazon RSA 2048 M01—107 d
8829bjkrm.topA95—–TLS1.2GoGetSSL RSA DV SSL CA 2—77 d
8830bjwlxy.cnA95—–TLS1.2DNSPod DV TLS RSA CA 2025—158 d
8831blackberry.comA95—–TLS1.2DigiCert Global G2 TLS RSA SHA256 2020 CA1117 d
8832blackmagicdesign.comA95—–TLS1.2DigiCert Global G2 TLS RSA SHA256 2020 CA1—74 d
8833blackrock.comA95—–TLS1.2DigiCert Global G2 TLS RSA SHA256 2020 CA1—34 d
8834blick.chA95—–TLS1.2Amazon RSA 2048 M01—124 d
8835blizzard.comA95—–TLS1.2Amazon RSA 2048 M04119 d
8836blog.gov.ukA95—–TLS1.2Amazon RSA 2048 M01126 d
8837blog.naver.comA95—–TLS1.2GeoTrust TLS RSA CA G1—147 d
8838blog.with2.netA95—–TLS1.2JPRS Domain Validation Authority - G4—54 d
8839bloggersdelight.dkA95—–TLS1.2RapidSSL TLS RSA CA G1—61 d
8840blogmura.comA95—–TLS1.2Amazon RSA 2048 M01145 d
8841bloomsbury.comA95—–TLS1.2Let's Encrypt—62 d
8842bluetooth.comA95—–TLS1.2DigiCert Global G2 TLS RSA SHA256 2020 CA1120 d
8843blurb.comA95—–TLS1.2DigiCert Global G2 TLS RSA SHA256 2020 CA1111 d
8844bmi.comA95—–TLS1.2DigiCert Global G2 TLS RSA SHA256 2020 CA1—186 d
8845bmigroup.comA95—–TLS1.2Corporation Service Company RSA OV SSL CA 297 d
8846bnamericas.comA95—–TLS1.2Amazon RSA 2048 M01—69 d
8847bndes.gov.brA95—–TLS1.2GeoTrust TLS RSA CA G1155 d
8848bnnbloomberg.caA95—–TLS1.2Amazon RSA 2048 M01—169 d
8849boisestate.eduA95—–TLS1.2Amazon RSA 2048 M0159 d
8850boku.ac.atA95—–TLS1.2GEANT TLS RSA 1—40 d
177 / 244

Track grade changes for your domains

Sign up free, watch your domains and get alerted the moment a grade drops.

FAQ

How often is the SSL leaderboard updated?

Watched domains are scanned daily; the top-20K leaderboard refreshes full snapshots every Sunday.

How is the SSL grade calculated?

Protocol versions, cipher strength, certificate validity, HSTS and OCSP stapling are weighted into a 0-100 score, mapped to grades from A+ to F.

What does an A+ SSL rating mean?

A near-perfect TLS setup: TLS 1.3 enabled, strong cipher suites, full forward secrecy (PFS) and correctly deployed HSTS.

Methodology

CertH grades each domain via pure TLS handshakes (no server access required): certificate validity, key strength, protocol versions, HSTS and OCSP stapling are scored with a deduction model (100 minus itemized penalties) into a 0-100 score mapped to six grades from A+ to F. Daily snapshots accumulate into an auditable health trend.

What is an SSL grade?

An SSL grade (A+ through F) evaluates a website's overall TLS configuration: protocol versions, cipher strength, certificate validity and trust chain, HSTS and OCSP stapling. A higher grade means stronger resistance to man-in-the-middle attacks and data breaches.

Why track certificate health over time?

Expired certificates, CA switches and configuration regressions can silently drag a grade down. CertH daily snapshots record those changes so you can spot risk before failures, with auditable history as evidence.